CVE-2003-1121

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Services in ScriptLogic 4.01, and possibly other versions before 4.14, process client requests at raised privileges, which allows remote attackers to (1) modify arbitrary registry entries via the ScriptLogic RPC service (SLRPC) or (2) modify arbitrary configuration via the RunAdmin services (SLRAserver.exe and SLRAclient.exe).

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.kb.cert.org/vuls/id/231705Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/609137Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/CRDY-5EXQRPThird Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/CRDY-5EXQSVThird Party Advisory, US Government Resource
http://www.securityfocus.com/bid/7475Patch
http://www.securityfocus.com/bid/7477Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/11920
https://exchange.xforce.ibmcloud.com/vulnerabilities/11921
http://www.kb.cert.org/vuls/id/231705Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/609137Third Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/CRDY-5EXQRPThird Party Advisory, US Government Resource
http://www.kb.cert.org/vuls/id/CRDY-5EXQSVThird Party Advisory, US Government Resource
http://www.securityfocus.com/bid/7475Patch
http://www.securityfocus.com/bid/7477Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/11920
https://exchange.xforce.ibmcloud.com/vulnerabilities/11921

Timeline

Published: Dec 31, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-11222.1ScriptLogic 4.01, and possibly other versions before 4.14, uses insecure permissions for the LOGS$ share, which allows users to modify log r CVE-2003-11237.5Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applet CVE-2003-11244.6Unknown vulnerability in Sun Management Center (SunMC) 2.1.1, 3.0, and 3.0 Revenue Release (RR), when installed and run by root, allows loca CVE-2003-11255.0Unknown vulnerability in ns-ldapd for Sun ONE Directory Server 4.16, 5.0, and 5.1 allows LDAP clients to cause a denial of service (service CVE-2003-11265.0Unknown vulnerability in SunOne/iPlanet Web Server SP3 through SP5 on Windows platforms allows remote attackers to cause a denial of service CVE-2003-11275.0Whale Communications e-Gap 2.5 on Windows 2000 allows remote attackers to obtain the source code for the login page via the HTTP TRACE metho CVE-2003-11287.5XMMS.pm in X2 XMMS Remote, as obtained from the vendor server between 4 AM 11 AM PST on May 7, 2003, allows remote attackers to execute arbi CVE-2003-11292.6Buffer overflow in the Yahoo! Audio Conferencing (aka Voice Chat) ActiveX control before 1,0,0,45 allows remote attackers to cause a denial CVE-2003-11317.5PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote attackers to execute a CVE-2003-11325.0The DNS server for Cisco Content Service Switch (CSS) 11000 and 11500, when prompted for a nonexistent AAAA record, responds with response c CVE-2003-11332.1Rit Research Labs The Bat! 1.0.11 through 2.0 creates new accounts with insecure ACLs, which allows local users to read other users' email m CVE-2003-11342.1Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash), possibly by calling the ClassDepth function wi